An attack technique that gets a malicious script embedded into a web page.
Short for Cross-Site Scripting. It exploits inadequate escaping of input to run a malicious script in another user's browser. It splits broadly into two types: stored XSS, where the script is saved on the server and runs every time the page is viewed, and reflected XSS, where it runs through a transient input such as a URL parameter.
© 2026 ITBGM